
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: D4g3TN/n2R4Joro94jGxX5LwHxwy72c9gRo/jzpVujY=
Subject key identifier: 6B:55:6E:80:AE:2E:99:7F:3A:5D:4B:BE:F2:30:3A:83:DF:BC:4B:E0
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 4C29E6824313ADC2E9EFF4EF20DB3608340A34A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: EF
Signing time: Tue 27 Oct 2026 19:03:46 +0000
Manifest this update: Tue 27 Oct 2026 18:58:46 +0000
Manifest next update: Wed 28 Oct 2026 22:16:46 +0000
Files and hashes: 1: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: lxf0mfHKbuIyxDOEkbQOW5ANaDrYOEYnPAf6QyaGp+8=)
2: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
3: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
4: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
5: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
6: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
7: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
8: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
9: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
10: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
11: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
12: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
13: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
14: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
15: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
16: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
17: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 22:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:29:e6:82:43:13:ad:c2:e9:ef:f4:ef:20:db:36:08:34:0a:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Oct 27 18:58:46 2026 GMT
Not After : Oct 28 22:16:46 2026 GMT
Subject: CN=6B556E80AE2E997F3A5D4BBEF2303A83DFBC4BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:0d:c9:75:ae:ef:19:d5:20:3b:12:41:86:
dd:aa:f7:d4:1a:67:16:54:be:80:a6:76:a0:34:46:
9c:74:72:e5:47:e9:b9:39:3d:67:45:d6:3f:a0:5d:
ef:81:32:8f:ae:88:d4:bb:ca:d3:de:e5:a3:8e:12:
e3:91:ed:19:d8:53:a5:84:8e:89:9c:99:68:e4:4c:
bc:cd:f7:c8:36:28:3e:a3:d3:ad:eb:dc:e3:92:17:
ea:fc:f4:4f:03:3b:c8:ce:ac:aa:9c:0e:aa:c1:be:
92:8f:d8:ee:cf:7d:55:68:ab:39:f0:c0:94:fa:31:
a0:5a:2f:73:60:75:67:b5:31:a7:fb:5e:09:f2:54:
ab:ea:47:36:b6:0f:88:d0:87:e7:26:4c:31:38:70:
99:55:bc:78:95:31:02:88:ad:52:f8:a7:ca:7b:35:
f0:c2:2d:33:ce:e2:9f:08:f6:49:38:f5:dd:4b:54:
71:53:2f:8b:34:0d:16:b2:1a:6b:bf:35:4b:72:69:
1f:60:2b:66:b9:72:36:a7:04:b9:a1:02:67:98:92:
6a:8f:8c:43:2e:70:b7:a2:0d:33:23:b0:6f:46:47:
0f:b9:f6:76:f2:6c:f7:d6:07:44:1d:8e:5a:59:b3:
d2:3d:1f:d5:fb:0e:85:3c:b1:c8:bd:68:98:94:74:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:6E:80:AE:2E:99:7F:3A:5D:4B:BE:F2:30:3A:83:DF:BC:4B:E0
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:90:36:f1:7c:b3:66:f0:1b:c9:4e:7f:a3:ef:9b:54:e8:
c8:94:6a:f2:a0:3c:3c:3b:93:45:6d:1f:84:5b:f4:73:68:0a:
64:ae:96:ab:cf:4e:87:38:21:37:9a:7a:96:be:13:40:48:ac:
f3:7a:e9:82:cc:a8:46:bd:be:2e:19:72:97:dc:50:0a:38:ae:
cc:dc:ef:5c:6e:de:ed:06:10:ba:dd:a0:08:16:6f:a3:69:6d:
35:9b:d3:ab:3f:3f:b8:75:bb:e1:24:0e:ac:8e:41:ba:cd:4c:
0d:64:b5:e7:47:52:4b:bd:af:4c:9f:43:cc:e3:06:a8:b7:d4:
01:86:b9:e8:0b:04:a5:41:9f:c5:60:79:38:54:0d:7f:9b:e5:
f4:14:23:4d:92:ca:08:0f:22:61:ef:a3:f9:dd:89:64:d6:fc:
5e:a4:6d:01:0d:db:95:3b:33:69:2b:74:17:95:59:d6:13:f3:
a8:be:e7:d4:72:2e:6d:f5:18:08:54:56:dd:27:21:62:dc:42:
2b:81:c6:30:1d:83:8a:1a:5f:67:6f:fb:02:7f:c4:92:f9:72:
22:eb:fb:3f:9c:43:7b:b4:5f:34:87:54:14:70:97:66:35:8d:
b2:39:15:09:31:88:04:5f:4d:97:db:9e:d9:60:76:6a:15:89:
bd:b0:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:08:10 2026 by rpki-client